Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa
File:                     323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier:          vtGBLWm9RwzvvQr9DijwXl3F47x7QQ/dlopTmHAO194=
Subject key identifier:   3B:BB:BE:90:DB:D6:22:43:C0:C8:69:B7:30:05:00:14:CE:40:68:3A
Certificate issuer:       /CN=34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76
Certificate serial:       5D7307A962AEA984C4078A8685794274965E5EF2
Authority key identifier: 34:F5:BF:7A:EE:9E:3C:E3:32:54:8A:20:AA:36:8C:F5:2E:5B:2A:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa
Signing time:             Tue 25 Aug 2026 15:07:52 +0000
ROA not before:           Tue 25 Aug 2026 15:02:52 +0000
ROA not after:            Tue 24 Aug 2027 15:07:52 +0000
asID:                     272518
IP address blocks:        2804:8268::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 08:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:73:07:a9:62:ae:a9:84:c4:07:8a:86:85:79:42:74:96:5e:5e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76
        Validity
            Not Before: Aug 25 15:02:52 2026 GMT
            Not After : Aug 24 15:07:52 2027 GMT
        Subject: CN=3BBBBE90DBD62243C0C869B730050014CE40683A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:dd:ff:46:66:06:9a:90:37:db:da:a6:5e:
                    64:c6:c8:5e:f7:a2:4f:a3:50:c0:ad:b1:03:12:2d:
                    21:8a:9e:5a:7f:77:a6:c6:15:ba:bc:0c:f5:2d:05:
                    8e:c1:7d:9c:29:0e:68:87:18:91:c5:e7:76:74:7d:
                    d5:e5:07:2c:0b:34:70:51:bc:12:d2:e3:0d:a2:fa:
                    b8:01:f8:b0:78:0d:a0:cb:fa:c8:53:46:63:d6:2b:
                    db:e2:db:f2:c3:44:d0:c5:fe:32:ea:ef:85:10:44:
                    1c:fd:0d:77:57:78:5d:1b:dd:0a:e0:56:52:b6:81:
                    33:29:01:63:ea:c8:df:d5:29:bf:79:05:1f:05:34:
                    d6:d0:20:a2:ec:ca:20:fb:a0:c9:36:bf:42:22:2b:
                    50:63:9f:50:2a:0d:cd:0b:d6:b2:6b:3f:6a:8a:1f:
                    01:9a:52:14:cf:8e:a8:42:41:4f:48:93:e8:e4:2b:
                    ff:c1:00:cb:2e:fe:17:6d:47:cf:9f:6a:a6:ee:29:
                    ea:a7:8c:67:73:9b:96:13:e6:09:61:fe:8b:ad:3e:
                    ff:4e:13:59:53:82:35:90:68:3b:cd:53:9a:ce:39:
                    d5:08:cd:4c:72:7f:7a:b7:96:5e:2c:12:02:17:0b:
                    ab:bd:f9:d2:13:d4:42:7d:20:0a:f3:79:9d:8c:16:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BB:BE:90:DB:D6:22:43:C0:C8:69:B7:30:05:00:14:CE:40:68:3A
            X509v3 Authority Key Identifier:
                keyid:34:F5:BF:7A:EE:9E:3C:E3:32:54:8A:20:AA:36:8C:F5:2E:5B:2A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33342d3334203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:84:54:08:77:f1:20:89:0e:f3:d4:df:04:11:d9:cc:cc:98:
         4d:42:52:82:74:11:ea:32:fc:7b:d2:cb:7d:f9:3a:87:7c:d0:
         fa:5d:8d:98:04:c7:12:e6:09:77:46:19:18:dc:14:88:7d:1a:
         b6:fd:77:42:cd:0a:a7:96:6d:ea:44:de:16:5e:34:ec:0d:5d:
         fb:17:ca:2e:53:ef:02:f5:18:b6:31:5b:25:1c:46:a9:1d:dd:
         b9:dc:56:bc:df:98:7d:57:70:a0:77:c3:6b:72:3b:d5:96:1d:
         0f:63:6f:b3:aa:5d:ad:a9:3f:33:6c:e9:d9:b1:0c:16:2d:46:
         03:7c:89:8b:15:b3:56:e1:14:77:58:5b:02:f1:d6:4c:3b:48:
         e9:f0:c0:90:e3:77:ce:55:8f:1b:21:83:7c:cf:38:09:0c:02:
         6e:42:97:c9:92:01:cc:23:69:2f:ae:47:0a:59:e5:e9:46:d7:
         7e:a7:8b:bf:0e:68:4e:dc:2e:d7:31:98:47:f3:ed:d5:95:90:
         25:58:ba:10:4b:c7:b9:0e:83:c3:03:0a:34:53:b3:cf:9c:3d:
         22:1a:82:5d:43:db:04:9f:99:e3:61:9b:38:7a:fd:1b:4d:05:
         f4:5c:2c:bf:f1:70:a4:06:c6:f9:70:c4:9e:57:c9:2c:f0:5b:
         4b:06:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:12:51 2026 by rpki-client